Schwab’s Crypto Expansion Meets a Tougher Policy and Market Test

TokenLogic has proposed a permissioned GHO Stability Module on Avalanche that would let approved counterparties exchange waUSAT for GHO. The design could add institutional stablecoin liquidity to Aave, but it creates an important asymmetry: receiving and transferring GHO would not guarantee the ability to reverse the original swap.

Approval would be checked in both directions. If access were revoked after a counterparty deposited waUSAT and received GHO, the participant could still transfer GHO but could not use the module to recover waUSAT. The proposal says that restriction should be reflected in commercial agreements.

Even a successful reverse swap would return a receipt token rather than dollars. The holder would still need to withdraw USAT from Aave, subject to available liquidity and reserve conditions, and then meet Anchorage Digital Bank's requirements for issuer redemption. Each step has its own permission and operational risk.

The proposal separates 65 million GHO of reserve funding, a 25 million GHO module draw limit and a 20 million waUSAT exposure cap. Some contract addresses and pricing details remain unspecified, and the forum post still requires governance approval and an implementation proposal.

The plan may deepen GHO liquidity, but investors should treat it as a proposal rather than an operating product. The decisive questions are whether governance approves the module, whether final contracts preserve the described limits, and how counterparties are protected if access is revoked after entry.

Cardano founder Charles Hoskinson says he is working with Input Output Global developer Lucas Rosa on a new programming language built around intent-based transactions and cryptographic proofs. No technical specification, performance data or release date has been published, so the announcement is a development plan rather than a shipping product.

The project arrives as Cardano advances Ouroboros Leios, a scaling design intended to raise transaction throughput. Cardano's October development report said the Leios database had moved to the main code branch, while a public test network has been operating since June. Those milestones show engineering progress, but they do not establish a mainnet deployment date.

The commercial challenge is demand. CryptoSlate cited about $63 million of value locked in Cardano decentralized-finance applications and less than $1 million of daily decentralized-exchange volume on October 19. Solana's reported DeFi deposits and trading activity were many times larger. The comparison is imperfect because network designs and data definitions differ, but the gap is too large to treat throughput as Cardano's only constraint.

Better developer tools can lower the cost of building applications. They cannot create liquidity, users or sustainable revenue by themselves. Cardano must show that new capacity and proof features attract products people use, rather than only improving a network with limited financial activity.

Investors should separate three milestones: a published language specification, a tested Leios implementation and measurable growth in applications, liquidity and fees. The first two are engineering achievements. The third is the evidence that would connect them to economic value.

Crypto theft reached $1.18 billion across 107 incidents in the third quarter, according to Hacken, up 55% from the second quarter. The increase came with a sharp change in the mix of losses: smart-contract exploits represented 48% of the total, compared with roughly 12% in the prior quarter.

The published totals imply an average recorded loss of about $11 million per incident in both periods. That calculation is only descriptive because a few large attacks can dominate a quarter, and Hacken's categories are broad. Still, it shows that the aggregate increase reflected more incidents and a different failure mix, not simply a higher average loss.

Two September cases illustrate the control problem. Bitget said attackers used compromised high-privilege credentials to inject unauthorized withdrawal instructions even though private keys were not stolen. In the Liquid incident, invalid assets passed a validation check before an automated process released genuine bitcoin. One failure occurred upstream of the signing key, while the other combined a validation defect with insufficient withdrawal friction.

The lesson for exchanges, custodians and investors is that no single control is enough. Key security, transaction authorization, smart-contract validation, withdrawal limits and manual escalation protect different parts of the path. Customer reimbursement can reduce user losses without proving the control failure has been fixed.

Quarterly categories should not become a checklist ranked only by last period's losses. The more useful test is whether independent controls can stop an asset transfer after an earlier safeguard fails.

Ondo Finance's USDY token has overtaken BlackRock's BUIDL in reported size, but that ranking says little about the value of ONDO. The source report put USDY at about $2.33 billion and BUIDL at about $2.2 billion on October 18, a narrow lead that one institutional allocation could reverse.

USDY gives holders economic exposure to a portfolio built around short-term U.S. Treasuries and bank deposits. Ondo says the token is not itself a Treasury security and gives holders no right to receive the underlying Treasuries. ONDO is different again: it is a governance token, not ownership in Ondo Finance, and has no direct claim on USDY reserves, fees or cash flow.

The source report estimated that 4.87 billion of ONDO's 10 billion maximum supply was circulating. A prior discussion about revenue-funded buybacks was only a temperature check, not a binding vote. BlackRock can also earn fees from products used in Ondo's reserve structure. The key question is whether ONDO ever gains an enforceable economic link to the business. Until then, USDY adoption and ONDO value can diverge.